Will openfortivpn continue to function after Forti has discontinued sslvpn

[marrem]

I have heard that in my company the FortiGate will cease to support sslvpn in the near future.

At the moment I use openfortivpn. Very satisfied. Much better than the busybody official client, that from time to time begs to give it permissions to scan my laptop etc.

But does openfortivpn work with other protocols after sslvpn is pulled.

https://docs.fortinet.com/document/fortigate/7.6.0/fortios-release-notes/877104/ssl-vpn-removed-from-2gb-ram-models-for-tunnel-and-web-mode

[DimitriPapadopoulos]

From the README:

openfortivpn is a client for PPP+TLS VPN

You'll probably have to turn to StrongSwan to set up IPSec connections. A colleague of mine had achieved working IPSec connections a few years ago, but I've never found the time to follow through.

See for example:

• https://docs.strongswan.org/docs/latest/interop/fortinet.html
• https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGate-Site-to-Site-VPN-with-Strongswan-on/ta-p/275092
• https://community.fortinet.com/t5/Support-Forum/strongSwan-on-linux-as-IPSec-VPN-client/m-p/23146
• https://docs.fortinet.com/document/fortigate/7.2.0/secgw-for-mobile-networks-deployment/417570/interoperability-with-strongswan
• https://www.linkedin.com/pulse/connecting-fortigate-ipsec-vpn-using-strongswan-linux-nourzadeh-ole6e/

[marrem]

Thanks for your response. Seemed I haven't properly read the Readme. Sorry. I will look into your suggestions concerning StrongSwan.

…

Op 23 jun 2025, om 13:38 heeft Dimitri Papadopoulos Orfanos ***@***.***> het volgende geschreven: DimitriPapadopoulos left a comment (adrienverge/openfortivpn#1288) <#1288 (comment)> From the README: openfortivpn is a client for PPP+TLS VPN You'll probably have to turn to StrongSwan to set up IPSec connections. A colleague of mine had achieved working IPSec connections a few years ago, but I've never found the time to follow through. See for example: https://docs.strongswan.org/docs/latest/interop/fortinet.html https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGate-Site-to-Site-VPN-with-Strongswan-on/ta-p/275092 https://community.fortinet.com/t5/Support-Forum/strongSwan-on-linux-as-IPSec-VPN-client/m-p/23146 https://docs.fortinet.com/document/fortigate/7.2.0/secgw-for-mobile-networks-deployment/417570/interoperability-with-strongswan https://www.linkedin.com/pulse/connecting-fortigate-ipsec-vpn-using-strongswan-linux-nourzadeh-ole6e/ — Reply to this email directly, view it on GitHub <#1288 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAWOB5MKH3BOATW5XHWRWN33E7RLDAVCNFSM6AAAAAB7YNN5MCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDSOJWGEZTKMZRGQ>. You are receiving this because you authored the thread.

[DimitriPapadopoulos]

Good luck. It would be great if you could share any findings, either here or elsewhere on the internet with a link here.

[dovi5988]

Please post any findings that you may have. I was trying with TCP and strongswan and it kept failing. As per TAC there are too many issues with it and they are re-writing their VPN client. I would happily contribute to an ipsec tcp solution for OpenFortiVPN.

[DimitriPapadopoulos]

I'm not certain it is worth basing an IPSec solution on openfortivpn. The core of openfortivpn is the authentication negotiation and the TLS+PPP tunnel. The routing/DNS settings part needs to be rewritten anyway.